fix: don't scrub included state output sensitive values

leg100 · Aug 7, 2023 · 478e314 · 478e314
1 parent 6f90a9c
commit 478e314
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/internal/api/state_marshaler.go b/internal/api/state_marshaler.go
@@ -39,7 +39,8 @@ func (m *jsonapiMarshaler) toState(from *state.Version, r *http.Request) (*types
 			case "outputs":
 				var include []any
 				for _, out := range from.Outputs {
-					include = append(include, m.toOutput(out, true))
+					// do not scrub sensitive values for included outputs
+					include = append(include, m.toOutput(out, false))
 				}
 				opts = append(opts, jsonapi.MarshalInclude(include...))
 			}